1. devstack
  2. Commit 0fe25e31a8ff40d76279e55c731fd31a93f0d21c
Browse code

Add the IPv6 IP to the TLS cert

For some crazy reason, we've forgotten about trying
to use IPv6 addresses directly with the SSL certificates.

So lets add some logic so clients can connect directly
with the v6 IP.

Change-Id: Ie8b8a2d99945f028bebe805b83bfd863b7b72d57

Julia Kreger authored on 2019/06/21 12:39:53
Showing 1 changed files
lib/tls
History View file @ 0fe25e3
... ... 
@@ -234,6 +234,9 @@ function init_cert {
234 234 
                 # see https://bugs.python.org/issue23239
235 235 
                 TLS_IP="DNS:$TLS_IP,IP:$TLS_IP"
236 236 
             fi
237 
+            if [[ -n "$HOST_IPV6" ]]; then
238 
+                TLS_IP="$TLS_IP,IP:$HOST_IPV6"
239 
+            fi
237 240 
         fi
238 241 
         make_cert $INT_CA_DIR $DEVSTACK_CERT_NAME $DEVSTACK_HOSTNAME "$TLS_IP"
239 242